Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.057exploits catalogados

36.288CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.910GitHub PoC 14.997VulnCheck XDB 8.843Nuclei 4.358Metasploit 3.489✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

PHPwebnews 0.2 MySQL Edition - 'det' SQL Injection

CVE-2008-6812—webappsphp

SQL injection vulnerability in bukutamu.php in phpWebNews 0.2 MySQL Edition allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPwebnews 0.2 MySQL Edition - 'id_kat' SQL Injection

CVE-2008-6813—webappsphp

SQL injection vulnerability in index.php in phpWebNews 0.2 MySQL Edition allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component SimpleBoard 1.0.1 - Arbitrary File Upload

CVE-2008-6814—webappsphp

Unrestricted file upload vulnerability in image_upload.php in the SimpleBoard (com_simpleboard) component 1.0.1 and earl

23RISCO

abrir ↗

Referência✓ VexDay Proof

Free Photo Gallery Site Script - 'path' File Disclosure

CVE-2008-1730—webappsphp

Directory traversal vulnerability in download.html in ARWScripts Gallery Script Lite (aka gallery-script-lite or Free Ph

23RISCO

abrir ↗

Referência✓ VexDay Proof

A-Link WL54AP3 / WL54AP2 - Cross-Site Request Forgery / Cross-Site Scripting

CVE-2008-6824—remotehardware

The management interface on the A-LINK WL54AP3 and WL54AP2 access points has a blank default password for the admin acco

23RISCO

abrir ↗

Referência✓ VexDay Proof

Telekorn Signkorn Guestbook 1.3 - 'dir_path' Remote File Inclusion

CVE-2006-4788—webappsphp

PHP remote file inclusion vulnerability in includes/log.inc.php in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, whe

23RISCO

abrir ↗

Referência✓ VexDay Proof

Fonality trixbox - 'langChoice' Local File Inclusion (connect-back) (2)

CVE-2008-6825—webappslinux

Directory traversal vulnerability in user/index.php in Fonality trixbox CE 2.6.1 and earlier allows remote attackers to

43RISCO

abrir ↗

Referência✓ VexDay Proof

Fuzzylime CMS 3.01 - 'commrss.php' Remote Code Execution

CVE-2008-6833—webappsphp

Directory traversal vulnerability in commsrss.php in fuzzylime (cms) before 3.01b allows remote attackers to include and

23RISCO

abrir ↗

Referência✓ VexDay Proof

KwsPHP Module jeuxflash 1.0 - 'cat' SQL Injection

CVE-2008-1759—webappsphp

SQL injection vulnerability in the jeuxflash module for KwsPHP allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Fuzzylime CMS 3.01a - 'file' Local File Inclusion

CVE-2008-6834—webappsphp

Multiple directory traversal vulnerabilities in fuzzylime (cms) 3.01 and 3.01a allow remote attackers to include and exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pie Cart Pro - 'Inc_Dir' Remote File Inclusion

CVE-2006-4969—webappsphp

Multiple PHP remote file inclusion vulnerabilities in WAHM E-Commerce Pie Cart Pro allow remote attackers to execute arb

28RISCO

abrir ↗

Referência✓ VexDay Proof

JSBoard 2.0.10 - 'login.php?table' Local File Inclusion

CVE-2007-1842—webappsphp

Directory traversal vulnerability in login.php in JSBoard before 2.0.12 allows remote attackers to include and execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module XFsection - 'modify.php' Remote File Inclusion

CVE-2007-3222—webappsphp

PHP remote file inclusion vulnerability in modify.php in the XFsection 1.07 module for XOOPS allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

MicroTik RouterOS 3.2 - SNMPd snmp-set Denial of Service

CVE-2008-0680—doshardware

SNMPd in MikroTik RouterOS 3.2 and earlier allows remote attackers to cause a denial of service (daemon crash) via a cra

23RISCO

abrir ↗

Referência✓ VexDay Proof

Blogator-script 0.95 - 'incl_page' Remote File Inclusion

CVE-2008-1760—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Blogator-script before 1.01 allow remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

CMS Creamotion - 'securite.php' Remote File Inclusion

CVE-2007-5298—webappsphp

Multiple PHP remote file inclusion vulnerabilities in CMS Creamotion allow remote attackers to execute arbitrary PHP cod

23RISCO

abrir ↗

Referência✓ VexDay Proof

Blogator-script 0.95 - 'id_art' SQL Injection

CVE-2008-1763—webappsphp

SQL injection vulnerability in _blogadata/include/sond_result.php in Blogator-script 0.95 allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

Adobe Album Starter 3.2 - Unchecked Local Buffer Overflow

CVE-2008-1765—localwindows

Buffer overflow in Adobe Photoshop Album Starter Edition 3.2, and possibly After Effects CS3, allows user-assisted remot

28RISCO

abrir ↗

Referência✓ VexDay Proof

Apache 2.2.14 mod_isapi - Dangling Pointer Remote SYSTEM

CVE-2010-0425—remotewindows

modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2

60RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component DBQuery 1.4.1.1 - Remote File Inclusion

CVE-2008-6841—webappsphp

PHP remote file inclusion vulnerability in the Green Mountain Information Technology and Consulting Database Query (com_

23RISCO

abrir ↗

Referência✓ VexDay Proof

TeamCalPro 3.1.000 - Multiple Local/Remote File Inclusions

CVE-2007-6554—webappsphp

Multiple directory traversal vulnerabilities in TeamCal Pro 3.1.000 and earlier allow remote attackers to include and ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpGreetCards - Cross-Site Scripting / Arbitrary File Upload

CVE-2008-6848—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in phpGreetCards 3.7 allows remote attackers to inject arbitrary w

23RISCO

abrir ↗

Referência✓ VexDay Proof

Dragoon 0.1 - 'root' Remote File Inclusion

CVE-2008-1773—webappsphp

PHP remote file inclusion vulnerability in includes/header.inc.php in Dragoon 0.1 allows remote attackers to execute arb

28RISCO

abrir ↗

Referência✓ VexDay Proof

V3 Chat Live Support 3.0.4 - Insecure Cookie Handling

CVE-2008-5783—webappsphp

admin/index.php in V3 Chat Live Support 3.0.4 allows remote attackers to bypass authentication and gain administrative a

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpGreetCards - Cross-Site Scripting / Arbitrary File Upload

CVE-2008-6849—webappsphp

Unrestricted file upload vulnerability in index.php in phpGreetCards 3.7 allows remote attackers to execute arbitrary PH

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pligg CMS 9.9.0 - 'editlink.php' SQL Injection

CVE-2008-1774—webappsphp

SQL injection vulnerability in editlink.php in Pligg 9.9.0 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP 5.2.6 - 'error_log' Safe_mode Bypass

CVE-2008-5625—localmultiple

PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_f

23RISCO

abrir ↗

Referência✓ VexDay Proof

EQdkp 1.3.0 - 'dbal.php' Remote File Inclusion

CVE-2006-2256—webappsphp

PHP remote file inclusion vulnerability in includes/dbal.php in EQdkp 1.3.0 and earlier allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

ZebraFeeds 1.0 - 'zf_path' Remote File Inclusion

CVE-2007-1010—webappsphp

Multiple PHP remote file inclusion vulnerabilities in ZebraFeeds 1.0, when register_globals is enabled, allow remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPLD 3.3 - Blind SQL Injection

CVE-2008-6851—webappsphp

SQL injection vulnerability in page.php in PHP Link Directory (phpLD) 3.3, when register_globals is enabled and magic_qu

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.